Alternatives and similar repositories for ETW-Trace:

Users that are interested in ETW-Trace are comparing it to the libraries listed below

• AndrewGaspar / km-stl
  A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…
  ☆31Updated 8 years ago
• russellklenk / ETW
  Event Tracing for Windows Custom Events
  ☆21Updated 10 years ago
• zodiacon / ndcoslo2019
  NDC Oslo 2019 slides and demos
  ☆32Updated 4 years ago
• HoShiMin / AriadnaProject
  🧶 The Win32 usermode threading library with UMS/fibers/threads support
  ☆30Updated 5 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 9 years ago
• prash-wghats / Dtrace-ETW
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Updated 2 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆28Updated 4 years ago
• xuyun018 / LPC-Local-Procedure-Call-
  LPC (Local Procedure Call) is a portion of Windows NT kernel, used for fast communication between threads or processes. It can be also us…
  ☆15Updated 3 years ago
• RIscRIpt / ntl
  Very tiny and selective implementation of STL for Windows NT kernel mode drivers
  ☆18Updated 3 years ago
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆32Updated 5 years ago
• JustasMasiulis / process_handle
  A cross platform, leak free system handle wrapper
  ☆19Updated 7 years ago
• JustasMasiulis / args
  Header only library for binding, reordering and currying of function arguments without cost
  ☆18Updated 6 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 8 years ago
• ww898 / in_proc_etw
  The internal Windows structures hack to create the in-process private ETW session
  ☆13Updated 8 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆28Updated 11 years ago
• shanepowell / DbgHelpUtils
  Windows user mini-dump helper library to extract data from it.
  ☆11Updated last week
• jherico / HidInterceptor
  A simple DLL that can intercept HID messages and pass them on to the real HID DLL, while logging the data.
  ☆21Updated 10 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆25Updated 10 years ago
• x-tinkerer / Gold
  ☆9Updated 11 years ago
• Speedi13 / NsiAllocateAndGetTable-used-from-GetTcpTableInternal
  Undocumented NsiAllocateAndGetTable usage in GetTcpTableInternal reverse engineered on Win7 X64
  ☆19Updated 6 years ago
• trueroad / extract-authenticode
  Extract Authenticode signature data from PE format file
  ☆18Updated 5 years ago
• arcpop / Observer
  ☆17Updated 8 years ago
• moukayz / KernelDriverDemo
  ☆24Updated 6 years ago
• addrianyy / asmlib_x64
  x64 assembler library
  ☆31Updated 9 months ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 4 years ago
• Alex3434 / GetHDDSerial
  Different ways to get the HDD Serial
  ☆37Updated 6 years ago
• nblog / Win32-Hook-Demo
  reveal and detect of common hooks under win32
  ☆13Updated 4 years ago
• bb107 / ServiceCall
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Updated 5 years ago
• avakar / corecursive
  Single-header C++20 library to remove recursion using coroutines
  ☆12Updated 4 years ago
• vlmillet / Phantom.JIT
  Phantom.Code extension providing Just-In-Time asm x64 compilation based on LLVM
  ☆8Updated 2 years ago